VulnSocial

CVE-2019-25470Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

eWON Firmware versions 12.2 to 13.0 contain an authentication bypass vulnerability that allows attackers with minimal privileges to retrieve sensitive user data by exploiting the wsdReadForm endpoint. Attackers can send POST requests to /wrcgi.bin/wsdReadForm with base64-encoded partial credentials and a crafted wsdList parameter to extract encrypted passwords for all users, which can be decrypted using a hardcoded XOR key.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-798

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-03-12: 2Technical Details · 2026-03-12: 103-12
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2019-25470 eWON Firmware versions 12.2 to 13.0 contain an authentication bypass vulnerability that allows attackers with minimal privileges to retrieve sensitive user data by ex… https://www.cve.org/CVERecord?id=CVE-2019-25470

    Post summary

    CVE-2019-25470 is an authentication bypass flaw in eWON firmware 12.2‑13.0 that allows low‑privilege attackers to read sensitive user data. The post provides the vulnerability details but no PoC, exploit, patch, or evidence of active exploitation.

    00000156
    56.7K followersView on X
  • RedPacket Security@RedPacketSec
    Disclosure

    CVE Alert: CVE-2019-25470 - eWON - eWON - https://www.redpacketsecurity.com/cve-alert-cve-2019-25470-ewon-ewon/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25470 #ewon #

    Post summary

    The post issues a CVE alert for CVE-2019-25470 on eWON devices and links to a security advisory, but does not present exploit code, proof of concept, active exploitation, or mitigation details.

    0000080
    3.5K followersView on X

Explore more

Back to dashboard